Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
File:                     156odshIAT1wTjIDr31ghtsCx50.mft (raw, json)
Hash identifier:          pl5N2wscbrT/S1Yo1zxdXULiKH1/tvg3EeIAZjnGnbk=
Subject key identifier:   BA:89:87:29:24:9E:E2:30:FA:83:49:82:9A:1D:43:16:2B:4B:2C:D5
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Certificate issuer:       /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial:       03B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
Manifest number:          03AC
Signing time:             Sun 19 Apr 2026 00:37:48 +0000
Manifest this update:     Sun 19 Apr 2026 00:37:47 +0000
Manifest next update:     Sun 26 Apr 2026 00:37:47 +0000
Files and hashes:         1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: WZwvRucO34kxi4jyd9XyUNjz7km9cwUuN8wBieLkJMk=)
                          2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: vZQX4t8MAHwhEYks15AvCgJPCCzogD0p8+MoFespB6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
                          rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
        Validity
            Not Before: Apr 19 00:37:47 2026 GMT
            Not After : Apr 26 00:37:47 2026 GMT
        Subject: CN=69e423db-7a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:9d:f8:cd:21:8e:1e:c5:e9:cc:a1:d0:d1:
                    a4:c5:19:b3:9a:e3:b4:4b:17:b4:06:ef:e2:35:a3:
                    96:eb:91:54:d1:fe:d2:db:9e:86:57:a5:3f:12:32:
                    43:9f:4c:e1:d6:bc:43:de:9f:5d:57:a0:b1:6d:0f:
                    20:5e:e8:72:88:8e:5f:06:41:02:dc:c2:00:7f:e0:
                    c7:b0:02:de:fa:28:4a:e6:09:ec:29:34:53:1b:17:
                    75:cf:70:4b:04:4c:46:91:b8:3f:2d:ca:f2:a6:f7:
                    85:e9:e4:f6:e3:f3:5a:33:88:02:97:11:0c:83:12:
                    aa:19:26:55:35:76:67:10:15:37:b3:bd:9c:ea:42:
                    cc:68:f6:78:0b:7d:4d:2b:9d:84:94:cb:e5:c2:8e:
                    f8:a6:0d:5c:fd:6a:b9:c9:a2:6a:99:49:4e:98:30:
                    04:31:4b:4c:ec:c6:67:a6:33:88:33:57:fb:c0:96:
                    53:80:16:fa:62:e9:e5:98:b8:f7:39:2e:d5:e6:b5:
                    f7:eb:e2:05:ce:22:ee:c1:74:c8:d3:61:ba:9c:48:
                    6a:e2:c1:08:e6:61:c0:59:68:18:fd:79:a3:6e:98:
                    25:27:18:7d:73:69:f5:80:83:2e:e7:ad:f3:01:31:
                    39:06:43:2f:5a:0f:81:64:62:34:e5:85:3b:7a:cf:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:87:29:24:9E:E2:30:FA:83:49:82:9A:1D:43:16:2B:4B:2C:D5
            X509v3 Authority Key Identifier:
                keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:91:c6:89:c0:98:60:68:79:b7:8d:ed:db:9e:4e:2a:d5:20:
         53:13:79:45:fc:8c:3a:0b:ce:e1:e6:10:ec:9c:2c:f4:f4:6c:
         13:a9:b0:72:fc:c0:2d:e4:1c:9f:13:02:52:d1:27:a8:5d:a0:
         ce:b9:07:2b:81:90:3f:85:43:ea:23:a6:2e:18:b8:43:5f:24:
         5a:e7:06:ef:e4:ea:ea:ae:2e:82:cc:d4:cf:0a:ff:b1:eb:d8:
         36:1c:24:2b:ab:1d:d2:ae:53:f3:70:f6:0a:04:08:3d:27:ef:
         2c:ac:03:c6:b4:85:f4:4f:8f:61:ae:01:92:f7:8e:55:d2:1c:
         f6:1a:ca:79:34:a9:f6:f8:93:ff:a5:6e:b5:6a:38:e0:9c:97:
         dd:c9:44:4f:f7:9d:7f:99:ca:3a:2b:77:ea:ec:0b:2e:4b:15:
         8a:94:01:eb:d3:d9:11:eb:0a:79:22:7f:ab:ec:b7:49:e4:5c:
         da:64:33:32:27:7e:d1:41:73:6f:d0:cc:5b:12:29:3e:8f:28:
         a4:7b:fb:95:3a:7a:d9:00:3c:06:1b:e2:d1:7f:7c:18:76:85:
         b3:fc:ac:d4:27:6b:3e:8b:2e:24:43:2f:27:22:a1:ad:28:1a:
         18:ab:12:67:cb:1a:d4:a7:4b:5c:37:90:d2:be:20:e8:24:54:
         cd:db:13:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2
REIwMkM3OUQwHhcNMjYwNDE5MDAzNzQ3WhcNMjYwNDI2MDAzNzQ3WjAYMRYwFAYD
VQQDEw02OWU0MjNkYi03YTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhRmd+M0hjh7F6cyh0NGkxRmzmuO0Sxe0Bu/iNaOW65FU0f7S256GV6U/EjJD
n0zh1rxD3p9dV6CxbQ8gXuhyiI5fBkEC3MIAf+DHsALe+ihK5gnsKTRTGxd1z3BL
BExGkbg/LcrypveF6eT24/NaM4gClxEMgxKqGSZVNXZnEBU3s72c6kLMaPZ4C31N
K52ElMvlwo74pg1c/Wq5yaJqmUlOmDAEMUtM7MZnpjOIM1f7wJZTgBb6YunlmLj3
OS7V5rX36+IFziLuwXTI02G6nEhq4sEI5mHAWWgY/XmjbpglJxh9c2n1gIMu563z
ATE5BkMvWg+BZGI05YU7es+gywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqJhykk
nuIw+oNJgpodQxYrSyzVMB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4
MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU
MXdUaklEcjMxZ2h0c0N4NTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIZHGicCYYGh5t43t255OKtUgUxN5RfyMOgvO4eYQ7Jws9PRsE6mwcvzALeQc
nxMCUtEnqF2gzrkHK4GQP4VD6iOmLhi4Q18kWucG7+Tq6q4ugszUzwr/sevYNhwk
K6sd0q5T83D2CgQIPSfvLKwDxrSF9E+PYa4BkveOVdIc9hrKeTSp9viT/6VutWo4
4JyX3clET/edf5nKOit36uwLLksVipQB69PZEesKeSJ/q+y3SeRc2mQzMid+0UFz
b9DMWxIpPo8opHv7lTp62QA8Bhvi0X98GHaFs/ys1CdrPosuJEMvJyKhrSgaGKsS
Z8sa1KdLXDeQ0r4g6CRUzdsT9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:59 2026 by rpki-client